Solinas-4 



DRAWING AMENDMENTS 



Replacement figures for Figures 1, 2, 3, and 5 are presented. 
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SELECT MODUL 
p=(2 A dk-2 A ck-l 
p=(2 A dk-2 A (d-l 
p=(2 A dk-2 A ck-l 

p=(2 A dk-2 A ck+l)/r, where r/=l; AND 
p=(2 A 4k-2 A 3k+2 A 2k+l)/r 



p FROM FORMS: 
herer/=l,0<=2c<=d; 
(d-2)k-...-2 A k+l)/r; 
here r/=l, 3d<=6c<=4d; 
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SELECf CURVE E AND ORDER q 



J SELECT BASEPOINT G 



^ ; 

GENERATE PRIVATE KEY w 



GENERATE^PUBLIC KEY W=wG 



>W 

DISTRIBUTE p, E, q, G, W 
IN AUTHENTIC MANNER 



FIG. 1 
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PROVER RETRIEVES ITS PRIVATE KEY w 



VERIFIER RETRIEVES PROVER'S PUBLIC KEY W 
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PROVER GENERATES PRIVATE INTEGER k 
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PROVER COMBINES kAND G TO FORM K 
USING FORM OF MODULUS p SELECTED 
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— PROVER SENDS K TO VERIFIER 
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VERIFIER SENDS CHALLENGE 
INTEGER c TO PROVER 
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PROVER COMBINES /, W^D w 
TO FORM RESPONSE|jNJEGER v 
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PROVER SENDS v TO VERIFIER 



VERIFIER COMBINES cG, K, AND W 
USING FORM OF MODULUS P SELECTED 
AND CHECKS EQUALITY WITH vG 



FIG. 2 
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17. 
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SIGNER RETRIEVES ITS PRIVATE KEY w 



SIGNER GENERATES PRIVATE INTEG 



SIGNER COMBINE 
USING FORM OF 





D G TO FORM K 
US p SELECTED 



SIGNER COMBINES K AND MESSAGE 
M TO FORM INTEGER h 



SIGNER COMBINES hi to AND 
w TO FORM INTEGER^/ 



SIGNER SENDS MESSAGE M 
ALONG WITH SIGNATURE (K,s) 



FIG. 3 
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VERIFIER RETRIEVES PROVER'S PUBLIC KEY W 



VERIFIER RECEIVES MESSAGE M 
ALONG WITH SIGNATURE (K,s) 



VERIFIER COMBINES K AND 
MESSAGE M TO FORM INTEGER h 



VERIFIER COMBINES h, K, AND W USING 
FORM OF MODULUS p SELECTED AND 
CHECKS EQUALITY OF RESULT WITH sG 



FIG. 4 
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SIGNER RETRIEVES ITS PRIVATE KEY w 
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SIGNER GENERATES PRIVATE INTEGER k, 



SIGNER COMBINES k«ND G TO FORM K 
USING FORM OF MODULUS p SELECTED 



SIGNER COMBINES K AND MESSAGE 
M TO FORM INTEGER h 



SIGNER COMBINES 
w TO FORM INTEGE 
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SIGNER SENDS MESSAGE M 
ALONG WITH SIGNATURE (h,s) 



FIG. 5 



32_ 



33 



34 



35 



VERIFIER RETRIEVES PROVER'S PUBLIC KEY W 



VERIFIER RECEIVES MESSAGE M 
ALONG WITH SIGNATURE (h,s) 



VERIFIER COMBINES h, W, AND sG USING 
FORM OF MODULUS p SELECTED TO FORM K 



VERIFIER COMBINES K AND MESSAGE 
M TO FORM INTEGER h' 



36 r 



VERIFIER CHECKS EQUALITY OF h AND h' 



FIG. 6 



